$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1033d60b-6e69-397c-8487-c407c7686525.roa File: 1033d60b-6e69-397c-8487-c407c7686525.roa (raw, json) Hash identifier: yPUORe3P8lDbwJ32cry0LaLoMRZmgDt15Ai1Q5y0I1g= Subject key identifier: B8:39:67:A8:D0:DD:C0:3A:3F:BC:6B:DD:DD:D3:CA:CD:93:DC:1F:ED Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Certificate serial: 010D0C9F4328584B67980863C45E49511F968000 Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1033d60b-6e69-397c-8487-c407c7686525.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 9318 IP address blocks: 173.0.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:98:08:63:c4:5e:49:51:1f:96:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=d921ea71-6402-48e1-bb17-42eb58142870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:0d:c4:4a:18:5d:8b:72:75:13:ff:1e:4d: 4b:7b:a3:2f:11:a3:3a:9c:3b:3b:3f:82:d3:c2:26: c9:57:31:5a:c6:f7:f9:44:d1:44:c2:b2:5d:38:59: 05:55:78:ef:f4:51:00:27:cc:78:be:d3:8f:f6:24: 67:a6:20:6b:d9:f5:a2:db:60:21:00:c7:44:81:ef: 9f:cd:27:e9:39:f2:31:8d:95:db:a9:84:ca:ff:1a: 53:da:ce:8a:99:c5:a5:5a:71:fd:8c:36:99:46:f2: 89:6b:d0:1b:b5:e7:03:85:73:c5:48:1b:4c:c5:6a: 4c:b1:03:21:4b:57:27:c8:bb:d3:0a:e1:06:d5:99: c6:37:e9:1a:5a:b2:85:45:f2:c2:ac:7c:13:e5:98: 6c:b3:25:4c:ab:d9:82:47:36:46:0f:07:88:bf:21: 79:43:8c:2c:b0:83:9e:f4:29:87:6d:71:5b:f5:a0: a2:78:a7:40:2e:55:1a:1a:55:72:94:60:21:78:57: 31:e7:b4:09:4c:ce:70:02:12:49:06:14:4c:ea:2c: c7:e9:6f:4e:d0:86:9f:98:d5:ae:27:73:f6:22:4b: 6b:ba:8b:ad:d4:2d:9d:ac:37:eb:f3:1d:55:18:44: 03:26:d5:87:f9:cc:1d:a2:8f:a6:46:f2:e6:df:14: 43:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:39:67:A8:D0:DD:C0:3A:3F:BC:6B:DD:DD:D3:CA:CD:93:DC:1F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1033d60b-6e69-397c-8487-c407c7686525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl X509v3 Authority Key Identifier: keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer sbgp-ipAddrBlock: critical IPv4: 173.0.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bc:19:a6:e2:d0:34:cb:93:12:20:05:e9:a1:f8:6b:e2:65: 6c:d6:5a:be:7a:7f:27:31:9d:4a:8c:3d:0e:fd:df:86:76:a2: f5:8c:e5:60:55:74:74:8f:5d:b1:b4:65:fc:02:1d:8c:02:ae: 12:9c:05:39:72:55:de:a2:bb:2d:4a:bc:94:9e:8d:87:87:48: fe:1a:93:d8:a8:08:a9:ba:d5:14:2e:28:08:4a:93:d9:1a:4c: a0:87:72:ac:bb:7c:e7:82:26:cd:7a:4c:92:e8:99:cc:b7:10: 24:a6:2a:c7:79:8c:7a:a3:af:af:5d:8f:08:08:2b:7e:1f:4f: e3:13:de:f5:0d:86:08:57:03:84:a5:1a:35:41:05:e2:30:22: 5b:28:7a:fb:8f:91:ad:52:25:9b:a4:e4:70:7d:67:2f:d0:bf: 90:6f:eb:9b:04:69:84:77:c1:82:48:ad:1a:08:59:78:1e:a7: 34:f9:bb:d1:61:f7:2f:b3:a5:28:f0:36:a8:51:f8:dc:ba:b4: d2:61:de:7b:77:c4:a2:66:54:52:1c:93:b6:29:7b:b5:6f:5e: 11:8b:db:39:dd:bf:f9:c1:41:8c:db:94:f0:6f:5c:d8:32:a0: 50:a1:ed:b5:fc:10:0f:05:52:9c:01:3b:f4:1c:5e:99:f9:94: 9c:3f:c9:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnmAhjxF5JUR+WgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTdlN2EtYzMxZC00MTdhLWJjMDctMWVjZGI5NmJl MDlmMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDkyMWVhNzEtNjQwMi00OGUxLWJiMTctNDJlYjU4MTQyODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArioNxEoYXYtydRP/Hk1Le6MvEaM6nDs7P4LT wibJVzFaxvf5RNFEwrJdOFkFVXjv9FEAJ8x4vtOP9iRnpiBr2fWi22AhAMdEge+f zSfpOfIxjZXbqYTK/xpT2s6KmcWlWnH9jDaZRvKJa9AbtecDhXPFSBtMxWpMsQMh S1cnyLvTCuEG1ZnGN+kaWrKFRfLCrHwT5ZhssyVMq9mCRzZGDweIvyF5Q4wssIOe 9CmHbXFb9aCieKdALlUaGlVylGAheFcx57QJTM5wAhJJBhRM6izH6W9O0IafmNWu J3P2Iktruout1C2drDfr8x1VGEQDJtWH+cwdoo+mRvLm3xRDewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg5Z6jQ3cA6P7xr3d3Tys2T3B/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5 N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNkYjk2YmUwOWYvMTAzM2Q2MGItNmU2OS0z OTdjLTg0ODctYzQwN2M3Njg2NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWJkOTdlN2EtYzMxZC00MTdhLWJj MDctMWVjZGI5NmJlMDlmLzFiZDk3ZTdhLWMzMWQtNDE3YS1iYzA3LTFlY2RiOTZi ZTA5Zi5jcmwwHwYDVR0jBBgwFoAU4LxGbY9f3COEYkIcIshswe7ry44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYmQ5N2U3YS1jMzFkLTQxN2EtYmMwNy0xZWNk Yjk2YmUwOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArQBhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu8Gabi0DTLkxIgBemh+GviZWzWWr56fycxnUqMPQ7934Z2ovWM5WBV dHSPXbG0ZfwCHYwCrhKcBTlyVd6iuy1KvJSejYeHSP4ak9ioCKm61RQuKAhKk9ka TKCHcqy7fOeCJs16TJLomcy3ECSmKsd5jHqjr69djwgIK34fT+MT3vUNhghXA4Sl GjVBBeIwIlsoevuPka1SJZuk5HB9Zy/Qv5Bv65sEaYR3wYJIrRoIWXgepzT5u9Fh 9y+zpSjwNqhR+Ny6tNJh3nt3xKJmVFIck7Ype7VvXhGL2zndv/nBQYzblPBvXNgy oFCh7bX8EA8FUpwBO/QcXpn5lJw/yYY= -----END CERTIFICATE-----Generated at Mon Oct 20 07:26:13 2025 by rpki-client